Overview

overview

10

Static

static

3

2024-08-11...ry.exe

windows7-x64

10

2024-08-11...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-11_2a73e5b0b90e164be00f5cfdd0bb0cac_wannacry

  • Size

    3.6MB

  • Sample

    240811-3pegrsvcpp

  • MD5

    2a73e5b0b90e164be00f5cfdd0bb0cac

  • SHA1

    0039f784eead69f0d2222072809da648753cfd09

  • SHA256

    bc548a8fa6508b7e0a71af7a7c4f87cc629ff6ed2ba1a26f9cc9862b6f41e2ca

  • SHA512

    7d5b3efe8a300c18ccca07d23247949b47bae661116196bde35b7eff77b6195a013774e614be022c349afb9f9e8725ae1f5acc7fd652a02f1bb9328fd74ea60c

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8Vj08:yDqPe1Cxcxk3ZAEUadzR83

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-11_2a73e5b0b90e164be00f5cfdd0bb0cac_wannacry

    • Size

      3.6MB

    • MD5

      2a73e5b0b90e164be00f5cfdd0bb0cac

    • SHA1

      0039f784eead69f0d2222072809da648753cfd09

    • SHA256

      bc548a8fa6508b7e0a71af7a7c4f87cc629ff6ed2ba1a26f9cc9862b6f41e2ca

    • SHA512

      7d5b3efe8a300c18ccca07d23247949b47bae661116196bde35b7eff77b6195a013774e614be022c349afb9f9e8725ae1f5acc7fd652a02f1bb9328fd74ea60c

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8Vj08:yDqPe1Cxcxk3ZAEUadzR83

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3203) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks